[pkgsrc/trunk]: pkgsrc/www/apache-tomcat7 Update to 7.0.90

[zafer <zafer%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/98fd9773501c
branches:  trunk
changeset: 383244:98fd9773501c
user:      zafer <zafer%pkgsrc.org@localhost>
date:      Wed Jul 25 22:03:30 2018 +0000

description:
Update to 7.0.90

Changelog:
Tomcat 7.0.90 (violetagg)
Catalina
        fix     62498: Correct a regression in the fix for CVE-2017-12617 that caused request failures for some requests when using the VirtualDirContext. (markt)
        fix     Delete reference to removed class that prevented Tomcat from starting when running under a security manager. (markt)

Tomcat 7.0.89 (violetagg)       not released
Catalina
        fix     JNDI resources that are defined with injection targets but no value are now treated as if the resource is not defined. (markt)
        fix     Ensure that JNDI names used for <lookup-name> entries in web.xml and for lookup elements of @Resource annotations specify a name with an explicit java: namespace. (markt)
        add     51953: Add the RemoteCIDRFilter and RemoteCIDRValve that can be used to allow/deny requests based on IPv4 and/or IPv6 client address where the IP ranges are defined using CIDR 
notation. Based on a patch by Francis Galiegue. (markt)
        fix     62343: Make CORS filter defaults more secure. This is the fix for CVE-2018-8014. (markt)
        fix     Make all loggers associated with Tomcat provided Filters non-static to ensure that log messages are not lost when a web application is reloaded. (markt)
        fix     Correct the manifest for the annotations-api.jar. The JAR implements the Common Annotations API 1.1 and the manifest should reflect that. (markt)
        fix     Switch to non-static loggers where there is a possibility of a logger becoming associated with a web application class loader causing log messages to be lost if the web application is 
stopped. (markt)
        add     62389: Add the IPv6 loopback address to the default internalProxies regular expression. Patch by Craig Andrews. (markt)
        fix     In the RemoteIpValve and RemoteIpFilter, correctly handle the case when the request passes through one or more trustedProxies but no internalProxies. Based on a patch by zhanhb. 
(markt)
        fix     Correct the logic in MBeanFactory.removeConnector() to ensure that the correct Connector is removed when there are multiple Connectors using different addresses but the same port. 
(markt)
        fix     Make JAASRealm mis-configuration more obvious by requiring the authenticated Subject to include at least one Principal of a type specified by userClassNames. (markt)
        fix     62476: Use GMT timezone for the value of Expires header as required by HTTP specification (RFC 7231, 7234). (kkolinko)

diffstat:

 www/apache-tomcat7/Makefile |   4 ++--
 www/apache-tomcat7/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (33 lines):

diff -r 6554a4d7d261 -r 98fd9773501c www/apache-tomcat7/Makefile
--- a/www/apache-tomcat7/Makefile       Wed Jul 25 21:37:17 2018 +0000
+++ b/www/apache-tomcat7/Makefile       Wed Jul 25 22:03:30 2018 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.36 2018/03/23 13:00:17 ryoon Exp $
+# $NetBSD: Makefile,v 1.37 2018/07/25 22:03:30 zafer Exp $
 
 DISTNAME=      apache-tomcat-${TOMCAT_VER}
 CATEGORIES=    www
@@ -21,7 +21,7 @@
 
 .include "../../mk/bsd.prefs.mk"
 
-TOMCAT_VER=            7.0.85
+TOMCAT_VER=            7.0.90
 TOMCAT_HOME=           ${PREFIX}/share/tomcat
 EGDIR=                 ${PREFIX}/share/examples/tomcat
 DOCDIR=                        ${PREFIX}/share/doc/tomcat
diff -r 6554a4d7d261 -r 98fd9773501c www/apache-tomcat7/distinfo
--- a/www/apache-tomcat7/distinfo       Wed Jul 25 21:37:17 2018 +0000
+++ b/www/apache-tomcat7/distinfo       Wed Jul 25 22:03:30 2018 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.30 2018/03/23 13:00:17 ryoon Exp $
+$NetBSD: distinfo,v 1.31 2018/07/25 22:03:30 zafer Exp $
 
-SHA1 (apache-tomcat-7.0.85.tar.gz) = 243a8be0bb445c412342965ee8fdf751d9c587e7
-RMD160 (apache-tomcat-7.0.85.tar.gz) = cbc2eb7edc4965a20d8708fa08917dcdb602829c
-SHA512 (apache-tomcat-7.0.85.tar.gz) = ed4f9d85fafe21570af7e01e712ebfb878066f9fab99d344935e20cf1f18c3389e103d33feb6937b5382408f3d356dbd8e7668bc82d2998412222bc099a1f8f7
-Size (apache-tomcat-7.0.85.tar.gz) = 9037227 bytes
+SHA1 (apache-tomcat-7.0.90.tar.gz) = cea1a3e0492f8d6bfb33fe6b4343542c361249a3
+RMD160 (apache-tomcat-7.0.90.tar.gz) = 0e14f72d07cbc53fb8d8a775028e5ae3a0839112
+SHA512 (apache-tomcat-7.0.90.tar.gz) = c7a47135b99684425260cd906cf5c9a5226837d3681d84ae4e3bb199068e97f0e63d07393d91ca0436204a1dc92bf9bd9a4a1c4c893187703e023503bbd81901
+Size (apache-tomcat-7.0.90.tar.gz) = 9094712 bytes